Role Summary

Security professional with hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), responsible for identifying, analyzing, and mitigating security risks across web, mobile, API, and network environments. Skilled in delivering secure solutions and managing vulnerability lifecycles.

Key Responsibilities

• Play a key role in delivering Security Penetration Testing and Vulnerability Management services
• Conduct security assessments by scanning applications and networks, followed by manual exploitation
• Perform Web Application Security Testing, including SAST and DAST methodologies
• Execute Mobile Application Security Testing using tools like MobSF
• Conduct API Security Testing using Postman and Burp Suite
• Establish and manage a Vulnerability Management Framework, including:
• Vulnerability identification and assessment
• Risk treatment and remediation
• Exception handling and acceptance
• Ensure all new and existing applications undergo VAPT and security configuration assessments before and after deployment
• Track and maintain security coverage for newly deployed assets and applications
• Manage VAPT processes and Secure Configuration Management
• Collaborate with stakeholders to gather requirements through workshops, meetings, and process modeling

Skills & Technical Expertise

• Strong understanding of OWASP Top 10, CIS benchmarks, and NIST frameworks
• Hands-on experience with manual penetration testing and automated security tools
• Knowledge of programming/scripting languages such as Java, Python, or Ruby
• Experience in:
• Web, Mobile, and API security testing
• Security configuration assessments
• Strong analytical, problem-solving, and communication skills

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, Business Administration, or related field
• 1–2 years of hands-on experience in VAPT or cybersecurity
• Ability to identify and exploit vulnerabilities in real-world environments
• Experience in end-to-end vulnerability management lifecycle
• Strong collaboration with development and business teams
• Certifications (preferred):
• CompTIA Security+,CEH ,CISSP

Pay: ₹30,000.00 - ₹70,000.00 per month

Work Location: Hybrid remote in Mohali, Punjab